Welcome to SecureDrop’s documentation!¶
SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources.
User Guides¶
- Source Guide
- Journalist Guide
- Updating Your Workstation
- Creating a GPG Key
- Connecting to the Journalist Interface
- Daily Journalist Alerts About Submissions
- Interacting With Sources
- Moving Documents to the Secure Viewing Station
- Decrypting on the Secure Viewing Station
- Working with Documents
- Encrypting and Moving Documents to the Journalist Workstation
- Decrypting and Preparing to Publish
- Admin Guide
- Passphrase Best Practices
Install SecureDrop¶
- Overview
- Glossary
- Passphrases
- Hardware
- Before You Begin
- Create Tails USBs
- Set Up the Secure Viewing Station
- Set Up the Transfer Device
- Generate the Submission Key
- Set up the Admin Workstation
- Set Up the Network Firewall
- Set Up the Servers
- Install SecureDrop
- Configure the Admin Workstation Post-Install and Create Backups
- Create an Admin Account on the Journalist Interface
- Test the Installation
- Onboard Journalists
Deployment Best Practices¶
- Overview
- Landing Page
- URL and Location
- HTTPS Only (No Mixed Content)
- Perfect Forward Secrecy
- SSL Certificate Recommendations
- Do Not Use Third-Party Analytics, Tracking, or Advertising
- Do Not Hyperlink .onion Addresses
- Avoid Direct Links to SecureDrop.org
- Apply Security Headers
- Additional Apache Configuration
- Further Security Considerations
- Landing Page Content Suggestions
- Minimum requirements for the SecureDrop environment
- Whole Site Changes
- Sample SecureDrop Privacy Policy
Checklists¶
Topic Guides¶
- Promoting Your SecureDrop Instance
- Make a High Profile Announcement
- Provide a Clear Link on Your Homepage
- Provide Links at the Bottom of Your Articles
- Create an Instructional Video on How to Access and Use Your SecureDrop
- Regularly Share Your SecureDrop Landing Page on Social Media
- Target Potential Whistleblowers with Advertising
- Put an Advertisement in Your Physical Paper
- What Makes SecureDrop Unique
- Investigating Logs
- OSSEC Guide
- Tails Guide
- Setting Up a Printer in Tails
- HTTPS on the Source Interface
- SSH Over Local Network
- SecureDrop On-Site Training Schedule
- Using a YubiKey with the Journalist Interface
- Back Up, Restore, Migrate
- Backing Up and Restoring Workstations
- Troubleshooting Kernel Updates
- Getting Support
Upgrade SecureDrop¶
Developer Documentation¶
- Contributing to SecureDrop
- Setting Up the Development Environment
- Making a PR to SecureDrop
- Development of Securedrop-Admin in the Admin Directory
- Development of SecureDropUpdater in the journalist_gui Directory
- Developing the SecureDrop Client Application
- Journalist Interface API
- Virtual Environments: Servers
- Virtual Environments: Admin Workstation
- Upgrade Testing using Molecule
- Contributing Guidelines
- Tips & Tricks
- Database Migrations
- Internationalization (i18n)
- Getting Started with Weblate Translations
- Documentation Guidelines
- Testing SecureDrop
- Testing: Application Tests
- Testing: Configuration Tests
- Testing: CI
- SecureDrop apt Repository
- Updating OSSEC Rules
- Generating AppArmor Profiles for Tor and Apache
- Portable SecureDrop Demo
- Release Management
- Docker Build Maintenance
- Deploying SecureDrop staging instance on Qubes
- Targeting Xenial support
Threat Model¶
- Threat Model
- Data Flow Diagram
- Attacks and Countermeasures on the SecureDrop Environment
- Application Code — SecureDrop Repository/Release
- Application Code — Source Interface and Journalist Interface
- Application Server and Monitor Server
- SecureDrop Dependencies — Python, Tor, Linux Kernel, apt, Tails, Ubuntu, or Hardware Firewall Vulnerabilities
- Network Infrastructure — FPF Infrastructure or Organization Corporate Network
- User Behavior and Hardware — SecureDrop Hardware Tampering or Failure in Operational Security